F5 BIG-IP Denial of Service Vulnerability (CNVD-2018-15639)

F5 BIG-IP is a collection of software and hardware that allows you to control the traffic that passes through your network. A denial-of-service vulnerability exists in F5 BIG-IP 11.x, 12.x, and 13.x. A remote attacker could send specially crafted data during the Transport Layer Security TLS...

Traffic Management Microkernel Denial of Service Vulnerability in Multiple F5 Products (CNVD-2018-09407)

F5 BIG-IP Analytics is a suite of Web application performance analytics software from F5 Corporation, USA. The software provides detailed analysis of performance metrics such as transactions per second, server latency, page load time and response throughput, etc. Traffic Management Microkernel TM...

CVE-2018-5510

On F5 BIG-IP 11.5.4 HF4-11.5.5, the Traffic Management Microkernel TMM may restart when processing a specific sequence of packets on IPv6 virtual servers...

F5 BIG-IP PEM Denial of Service Vulnerability (CNVD-2018-07870)

F5 BIG-IP is an all-in-one network appliance that integrates network traffic management, application security management, load balancing, etc. PEM is one of the policy enforcement managers. A security vulnerability exists in the F5 BIG-IP PEM. An attacker could exploit this vulnerability to cause...

F5 BIG-IP Arbitrary Code Execution Vulnerability (CNVD-2018-07456)

The BIG-IP platform is the intelligent evolution of Application Delivery Controller ADC technology.The BIG-IP system is at the heart of the information flow between applications and users and ensures that the flow of information between applications and users is seamless. The F5 product modules...

Remote code execution

In some circumstances, the Traffic Management Microkernel TMM does not properly handle certain malformed Websockets requests/responses, which allows remote attackers to cause a denial-of-service DoS or possible remote code execution on the F5 BIG-IP system running versions 13.0.0 - 13.1.0.3 or...

CVE-2018-5504

In some circumstances, the Traffic Management Microkernel TMM does not properly handle certain malformed Websockets requests/responses, which allows remote attackers to cause a denial-of-service DoS or possible remote code execution on the F5 BIG-IP system running versions 13.0.0 - 13.1.0.3 or...

F5 BIG-IP Kernel Reboot Vulnerability

F5 BIG-IP is an all-in-one network device from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A security vulnerability exists in the F5 BIG-IP. An attacker could exploit this vulnerability to cause the Traffic Management...

CVE-2017-6169

In versions 13.0.0, 12.0.0-12.1.3, or 11.6.0-11.6.2, an F5 BIG-IP virtual server using the URL categorization feature may cause the Traffic Management Microkernel TMM to produce a core file when it receives malformed URLs during categorization...

Design/Logic Flaw

In versions 13.0.0, 12.0.0-12.1.3, or 11.6.0-11.6.2, an F5 BIG-IP virtual server using the URL categorization feature may cause the Traffic Management Microkernel TMM to produce a core file when it receives malformed URLs during categorization...

Denial of Service Vulnerability in Multiple F5 Products (CNVD-2018-01149)

BIG-IP LTM is a product of F5 Corporation of the U.S. F5 BIG-IP LTM is a local traffic manager; BIG-IP AAM is an application acceleration manager. A denial of service vulnerability exists in multiple F5 products. An attacker can exploit this vulnerability by sending a malicious request to cause a...

Multiple F5 Products Service Disruption Vulnerabilities

BIG-IP LTM is a product of F5 Corporation of the U.S. F5 BIG-IP LTM is a local traffic manager; BIG-IP AAM is an application acceleration manager. A service interruption vulnerability exists in multiple F5 products. An attacker could exploit this vulnerability to interrupt the Traffic Management...

CVE-2017-6136

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0 and 12.0.0 - 12.1.2, undisclosed traffic patterns sent to BIG-IP virtual servers, with the TCP Fast Open and Tail Loss Probe options enabled in the associated TCP profile, may cause...

CVE-2017-6164

Concrete technical details are available: CVE-2017-6164 affects F5 BIG-IP products with TMM Affected: BIG-IP LTM and related modules (AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) on 11.x, 12.x and 13.x lines. Issue: malformed TLS 1.2 record...

Code injection

In BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12.0.0 to 12.1.1, in some cases the Traffic Management Microkernel TMM may crash when processing fragmented packets. This vulnerability affects TMM through a virtual server configured with a FastL4...

CVE-2017-6166

In BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12.0.0 to 12.1.1, in some cases the Traffic Management Microkernel TMM may crash when processing fragmented packets. This vulnerability affects TMM through a virtual server configured with a FastL4...

CVE-2017-6166

In BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12.0.0 to 12.1.1, in some cases the Traffic Management Microkernel TMM may crash when processing fragmented packets. This vulnerability affects TMM through a virtual server configured with a FastL4...

F5 Networks BIG-IP : BIG-IP FastL4 TMM vulnerability (K65615624)

In BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12.0.0 to 12.1.1, in some cases the Traffic Management Microkernel TMM may crash when processing fragmented packets. This vulnerability affects TMM through a virtual server configured with a FastL4...

F5 BIG-IP Denial of Service Vulnerability (CNVD-2017-35573)

F5 BIG-IP LTM, etc. are products of F5 USA.LTM is a local traffic manager; APM is a suite of solutions that provide secure unified access to business-critical applications and networks.Traffic Management Microkernel TMM is one of the service processes that performs traffic management. A security...

F5 BIG-IP Denial of Service Vulnerability (CNVD-2017-35572)

F5 BIG-IP is a collection of software and hardware that allows you to control the traffic that passes through your network. A denial of service vulnerability exists in F5 BIG-IP. A remote user can cause the target traffic management microkernel TMM to restart by sending a specially crafted HTTP...